ssdeep是用于创建和比较模糊哈希或[»上下文触发的分段哈希](http://dfrws.org/2006/proceedings/12-Kornblum.pdf)的实用程序 通过简单地将两个散列相互比较，模糊散列使识别相似或几乎相同的文本变得容易 [https://pecl.php.net/package/ssdeep](https://pecl.php.net/package/ssdeep) * [ssdeep\_fuzzy\_compare](https://www.php.net/manual/en/function.ssdeep-fuzzy-compare.php)—计算两个模糊哈希签名之间的匹配分数 * [ssdeep\_fuzzy\_hash\_filename](https://www.php.net/manual/en/function.ssdeep-fuzzy-hash-filename.php)( string $file_name ) : string—从文件创建模糊哈希 * [ssdeep\_fuzzy\_hash](https://www.php.net/manual/en/function.ssdeep-fuzzy-hash.php)( string $to_hash ) : string—从字符串创建模糊哈希 ## ModSecurity技巧：使用ssdeep检测Webshell